[138746] in North American Network Operators' Group
Re: Why does abuse handling take so long ?
daemon@ATHENA.MIT.EDU (Leo Bicknell)
Mon Mar 14 12:35:55 2011
Date: Mon, 14 Mar 2011 09:35:00 -0700
From: Leo Bicknell <bicknell@ufp.org>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <4D7E3E4A.8080503@gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--4Ckj6UjgE2iN1+kY
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
In a message written on Mon, Mar 14, 2011 at 12:11:54PM -0400, William Alle=
n Simpson wrote:
> Leo's remembering the old days (80s - early '90s), when we checked whois =
and
> called each others' NOCs directly. That stopped working, and we started=
=20
> getting
> front line support, who's whole purpose was to filter. Nowadays, I've of=
ten
> been stuck in voice prompt or voice mail hell, unable to get anybody on t=
he
> phone, and cannot get any response from email, either. Ever. The big IL=
ECs
> are the worst.
If you're a network operator, you probably know much better resources
for getting phone numbers. That's not to say I wouldn't like to
see ARIN records cleaned up, I fought that battle for a number of
years.
INOC DBA? Peeringdb.com? puck.nether.net/netops?
I hate to say it, but if you're calling the number in Whois or on
the front off www.foo.com then perhaps frontline support is exactly
who you should be talking to about these issues. The entire purpose
of any support organization is to filter to the appropriate folks.
The more clue you show in directing your query, the more clue you'll get
in response.
Also, it can help if you follow the relationships. Consider two
"regional" networks and two "international backbone providers", so
you have a network path like:
R1----ISP1----ISP2----R2
I understand we'd all like it to work that if R1 needs to reach R2
they call them directly. However sometimes calling ISP1 and making
them get involved allows them to get the attention of ISP2, and
finally them to get R2 to do something.
I can't think of a time I wasn't able to get ahold of the right
folks when I needed to do so, using publically available information.
But then I don't bother people about a few spams, or 1Mbps "DDOS's",
remain calm when I call, provide lots of information, and have a
realistic expectation of how quickly they might be able to respond.
Having answered abuse phones off and on for many years I can tell you
that's the exception, not the rule. More common is to get someone
calling to scream at you for 15 minutes about how you're destroying
his livelyhood only to figure out that his box was misconfigured.
Funny how you never even get an "I'm sorry" when that happens.
--=20
Leo Bicknell - bicknell@ufp.org - CCIE 3440
PGP keys at http://www.ufp.org/~bicknell/
--4Ckj6UjgE2iN1+kY
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
iQIVAwUBTX5Ds7N3O8aJIdTMAQKjYw/8DYoiLE/FWZCz06oST3jJcw4h2pahUX7g
tS9WgnHzfxzUsYfTQCB9fr1SNIOlInNyarOz2aZJdqjDWi4WNIvTQD8JJbvNqPO9
MvTNI+BjLf7ahvZaX9wcLqQm1EatkFGDprZSDSN4pMrhfCSTr4H2c34ciUR8xbHZ
BzWLgcsr2jcvKVeFeO492aPF1l4VZpqwSUsBgeo26lAzbC4bbnuohoaYniTG1g+Y
y8G443D/8K3m5AA6rr7ab/dUse2kjIk8lGQFb7+wpQIA3fYC3GoFz+rvTTqSU0rX
FdYsxiDFhl1yaRr5MCUp0viv8ajaliNgzyOaD8s4b3X2b5V9Rf/L173RleAogyaT
iQgQAR7utkNvdy9KwOFkiwKGmzDLrWHu+2DzmafrLyxsIbTwTNxzCcqr8vYip1rj
dqJXJyck4yJsqWeTzgHiWYoAgYXWLm2xi+1g1O+xdPh7MMmZ6LVBiAx+9Gku7nDu
MKkIEl6VDNcANVh1iaWR+U5rs1WEzkgWA2aOR1VMkd7JVjpMv3iiJEDrHdg+2fKg
TZGcBbER7IrCozFq+Kk4wV7fgOCj5rTMAnG0Iqw3dVXjHO7RtGq/4pfGaazPaRbM
XU3fJbtNErbNM0ZbhyRbC90cgsHI/h1uOtch5W/ptZIcRyvwKOccVBc+sp+JW5V0
qieLo7jgWnE=
=quc4
-----END PGP SIGNATURE-----
--4Ckj6UjgE2iN1+kY--
